Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 16:50

General

  • Target

    af6ade889a927447b5a402483f5f07c2_JaffaCakes118.html

  • Size

    5KB

  • MD5

    af6ade889a927447b5a402483f5f07c2

  • SHA1

    ea50597eee354eefc7e05af6cae7ce44d9f728cb

  • SHA256

    1264f6854d2f7c07b4ec6f69d9e83ae5e47ff4b1e00e3a9425af3a335171ebe6

  • SHA512

    71759c8d4eb6138172cfad17a3630337693a12945351d7a5bacb94cea06b72ae84842d9a854be0d56ccaa4a60b40d1cb46fff5feb4e9a2ab1e410a2da99f77b0

  • SSDEEP

    96:Tb+cNDuuJ9BVvmjXeJ5k6vJchJxJcmq+J2bkiJJgs0Jx5OnJstFJqtJOQKC:TxSupVyeJe6voL3kQz0n+QFKC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\af6ade889a927447b5a402483f5f07c2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1548

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2d0f1dd60576aa480c4151aa13a5043

    SHA1

    ea254b265d917b6c3d096ae304e8a808c0f54a2f

    SHA256

    2bd30f0b44e3eb3a3f7f235d59339c34208ee5b66f70442bb45d9c9191300291

    SHA512

    a741c260e0048d455a2c01fb4aa1aac4920f739280cba4051bade4ec5b6ac38e7c458ef8efb32ab9c3b31c073f4ce9ad9d2bfc097bc5dcb2f2773fa8abc0abfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0202705dbae5ffc6e17205a809350dca

    SHA1

    18fffa137c42743d28649dcb80e6afbf6d843aaf

    SHA256

    92d20a5f4e819d9747fb703deeae747ce8c7fe5c5d4ace63cfec49e6d1ad164d

    SHA512

    083b36c2db2997128fdf417e900e9b8e1cc32cb1984286d45e0ec17759a786c8bc5db8ff644ec66541d74bd48b735f0329ad388fddb66a17334ec187aa59c544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f9033b2523a084ca04f85ee981c9738

    SHA1

    586c2411991b4b8c5fb55d278f16bab23bd2876e

    SHA256

    e543cdad0a1e2872fec0fd3efd0b448f1e3e7ff25ab9cc19813eb20aca814813

    SHA512

    a6660df9551250752df41ed1b17bf8d5fc4b25f8c6704990632ff607095de0856de41a734481c42682210a5836d736acacf9227e02518d4609aaa956badc50b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    524269281b7bf70be860e42b2a107817

    SHA1

    b24dd77bc686f8f6fd41373f25c76d247596e7fd

    SHA256

    ad8abbf00659931d3f63d916825a0c99a023fe51b2f0e55c3f69c5216d9d9c92

    SHA512

    b8be8b6aef6b7b3fd3f668d48bca6da8909687317a1f27344b7b0cf149e99e2e8361887f8f6153306f167fe8447f615e6fa01e79ae4ff897042a00a04c811b92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b83aaf6038ed239f6fdd8161bbab2d16

    SHA1

    beb2c1deae8aca86724d0e30da58c1da5c906d25

    SHA256

    68c1deacb924387beda5a981192e4e4c2bc628afc784cd835c306a9449035a48

    SHA512

    96d795b6fde51d1d2eb246b7827f1a1acc9ceed23ba2f42e1abb03b1f71ba86e8fa0a00d0a49fb0e056d57386cd87103b3a215299388f29bd3441bd9dd79bd70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2224cfda7f3596ee4a6532b68a64077

    SHA1

    fe554f2994cfb1aca40d425f6bccbdd2d6bcf9f0

    SHA256

    7afc9b74896c6772c774835083c2714d270bf52bcaa119e00a368cebfc124bc5

    SHA512

    556ac2d614e73ac663692a20c0e15ad1c9b869e7ef559371b7770dc2875d9ecb3551144813223d4a66065c44681e41be29e824b5e2eec187241c120507018bc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b01a727b281b3d8b95b90b09ba17de7

    SHA1

    be402e6ddff190edd1e9cff8f7f156c00f2671e4

    SHA256

    953fecaf6e4889846779163ebd34ab1afb6de2d666c377e7e3b3fe675164445c

    SHA512

    375fe4b916beaf30d30f0b8bb03a9867c2bf321b7e48b1335cbe97f0eb07f15674d0dfecb9e2249dfbe5eb85fbb4a47e713356ec7dbfa950c07ef0639f004f51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0b1f6b670aed712962e384a15dc029b

    SHA1

    a58ee492e49c6064b0c21376f7a65bea21b71be2

    SHA256

    4c6381a244f91d7b8afc43be080022ba17c25945e3080e35d211ed99b08036b5

    SHA512

    b75d1327116eb757f8c6b92891b990ea0d32054eed1274a85be4782be6429f0662e6cf27b2a9278ab325e6292aba2baccdc926fb8f38f3e64d60bf425eccc3c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a67ddd235e52b25fdc658d52f08b539e

    SHA1

    8f15cdb500a9d3a5b4fb5063fa8507358a45897a

    SHA256

    344dd0f44e52de9a3aa5594ea93be4a665b434d2146d0bafeb3dd5d371281e29

    SHA512

    d254225527bc48299042b18d4bc4c80fa78a034dd198334eca03f47ace64b0d2ebc5d7c6ff732d6d5d902cdbd7380931f904126d02412368cf36b63c0368ffb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bed53994b9c77b9a83782411c8d09f8

    SHA1

    13df2dfe7fe237e21d19d37f0ecec77bfe963e26

    SHA256

    1b81d7f28b22964f2b3b6f891e3af93ad774d8e54eae4a2f1258106c06e511f8

    SHA512

    99251e8cf8814196187dce43435896d3993b2d88e9cc01a21bea21b3699e7ced7c472d811d36709191a5d9983a714decfeee94c440fd6dd831bb91981168ec89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59a58dc9549a8a3f90ff784d63c06791

    SHA1

    9a5f5d979ecd608d2c00868f1c46f5b3f26b94b6

    SHA256

    52dd86c6020f9607c504c4aec4b1cd2a4732b011bd282d1af73840f88d8e5f6a

    SHA512

    1a11797c9b192617863820af8a593f841da15b4d77f67f0d03636b1050f226b6e1f45d6609f62aa05170c4c255d3625b3b6382d51ca0b13acd988adf872d4e07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    290f02b244270032c955a903b8d50d08

    SHA1

    fd1c2bbd8f4228297759e47191b38dbe5dd76495

    SHA256

    cfc73e9afcd6e0d0d31c78a14000e54b16dc42efcaee832a9f90fd576b3c4411

    SHA512

    206f9ba6e92c2bfb62c32d76e4cb1615cbf1c97b7017b01743c9c64bde32244d367ca23a26069a656145107e571df0731990fee364579815db8e46b2c09e8a76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c13b32c8c1c1b249212df4bb8a1bb1a8

    SHA1

    560c8c2971f8a5362941364853977c7ba929ed31

    SHA256

    46f5df976db86387b7727bc64f08ee44a0490427fb2b30261799d0327ce0b67b

    SHA512

    e40fd0541b70b210e7a276da18be732622a54b7e2ed50e91bd7575dc31ba6312220f122371e7a384d6e1b1120ef300dcd73b1840ba4d1d6789f39aefb823e2e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    629fd98c28b73ff2e175edd597db4229

    SHA1

    49fa87e9ef23461650db6c859e7cedcb8a51694a

    SHA256

    ce1b47b398bc69e1f5e0180dac8de448aa4ed3730e7440feed46dd19a4ee637d

    SHA512

    fa8ed9ab59bfd547063a82769464c434fd5524aede5fe6bc189a563933c89d440cc519f5d74f893fea0b525f1fadf66d2899fbfb475e80c753e4b7b4a400da60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    344866046cd3638dcae57deb0cd7c583

    SHA1

    172b865e79da9dc413f00feb4f58562daafe093f

    SHA256

    c231f43cb3d3dcffa4c2459e29eb8f6504557684903629bdaf8821014b84d1ff

    SHA512

    1978ecb95fd6592bef6227676f0aa5aaa3b357814250a3c202d7f03ef590f5799f67e2b4b513191568c454e920de006841b1e3badc6336f3bd119cafc6f634c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de50303d37f235b842c275fec0442fe4

    SHA1

    01fef443ea1b672fd8346631a9d50b6b4b9ed8b3

    SHA256

    febf3b340a1143e6c8f6f869acf8a1ade2a929af140edb8d26836adca72e9d22

    SHA512

    974fae64e42cb5931c1dc97bc7939cc0d120b8809ea1c5279f6fb20b860db3b8c7ce051c052564f2e79b4d78c9c9420af35a733e5741a2b3035ac4c33c44d7b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d8cbae64d5b0f28a400463b491949eb

    SHA1

    d57c60d33442122689f50f2ee4f94970e0c389e9

    SHA256

    c5ab77a942e6b7833b2f79a6bb9db5b1726f521a50deb56ffb96fc88560f5420

    SHA512

    16006198820aac71848cc59e95f203e6e3980b6839328b770fe883aa33d4e93a9cfa12b08410cb33990657816a06449c583db0863d5a2c894142873f522ab1cd

  • C:\Users\Admin\AppData\Local\Temp\Cab3CC5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3DF4.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b